Farseer malware brings Windows exploits to attack group's Android arsenal

guest · Feb 27, 2019

Farseer malware brings Windows exploits to attack group's Android arsenal
The new threat has been connected to attackers known for targeting Android devices
February 27, 2019
https://www.zdnet.com/article/new-f...windows-exploits-to-chinese-attacker-arsenal/

On Tuesday, cybersecurity researchers from Palo Alto's Unit 42 said the malware, dubbed Farseer, has connections to HenBox, a cyberespionage malware detected in 2018 in attacks against Google's Android operating system.
The malware is spread through phishing campaigns and malicious .PDF files which employ social engineering tactics through the copy-and-paste of news articles sourced through a Myanmar website.

Farseer uses DLL sideloading by dropping known, legitimate binaries to a host which are signed, trusted applications passed by vendors including Microsoft and therefore are not deemed malicious by traditional antivirus solutions.
In total, 30 unique samples of the malware have appeared on the radar over the past two and a half years.

"Whereas HenBox posed a threat for devices running Android, Farseer is built to target Windows, which appears to be more typical given previous threats seen from the group or groups behind this, and related malware," the researchers say.
Click to expand...

Log in or Sign up

Farseer malware brings Windows exploits to attack group's Android arsenal

guest Guest

Log in or Sign up

Farseer malware brings Windows exploits to attack group's Android arsenal

guest Guest

Useful Searches